Scan your agent
Scan your agent, free

Deedglass and Pipelock

Pipelock is an agent firewall that proxies an agent's traffic, scans its MCP traffic and signs its decisions.11 Deedglass adds what Postgres committed after each call, and undo for the rows.

Last checked 13 October 2026

The short answer

  • Pipelock describes itself as an agent firewall with an Apache-2.0 core. It proxies fetch, forward and WebSocket traffic and MCP, and scans MCP input, responses and tool poisoning.1
  • Its pricing page lists Ed25519-signed records of its decisions and signed audit reports.1
  • Deedglass decides each tool call, then checks what Postgres committed and seals the result into a record.

When to choose Pipelock

  • Your main worry is what the agent sends out and what its tools feed back: outbound traffic and poisoned tools.1
  • You want MCP traffic scanned in both directions.1
  • You want a free plan to start with.1

When Deedglass fits

  • Your agent writes to Postgres and you need to know whether what was committed matches the claim.
  • You want to undo the rows an agent changed.
  • You want a person to approve risky writes before they run.

Side by side

QuestionPipelockDeedglass
Filters what leaves the agentYes: a proxy with egress containment1No
Scans MCP traffic for poisoningYes1No: it decides calls by rule
Checks what Postgres committedNot described on its pricing page (checked 13 October 2026)1Yes: reads Postgres's change log
Signed outputYes: Ed25519-signed decision records and audit reports1Yes: every action sealed into a hash-linked chain
Undoes rowsNot described on its pricing page (checked 13 October 2026)1Yes, with checks before each undo
LicenceApache-2.0 core1Apache-2.0 core
Price (checked 13 October 2026)Free Community plan; paid plans on its pricing page1Free self-host · Pro $49 a month

Use them together

They cover different directions. Pipelock watches the agent's traffic; Deedglass decides the writes it makes and checks what the database committed.

What Deedglass doesn't do

  • It doesn't filter outbound traffic or scan prompts.
  • Its check after the call covers Postgres; other tools get rules and records.

Sources

  1. 1Pipelock pricing · pipelab.org · checked 13 October 2026

Last checked 13 October 2026. We re-check these pages every month. If something is out of date, write to hello@deedglass.com.

Try it on your own setup

Try it in your browser Get started
npx deedglass scan

Grades only your own setup. Nothing is uploaded.

Pricing